Network Traffic Analysis with Wireshark (5cr)

Objective

The learning objectives of this course are to set up a functional Wireshark environment, develop proficiency in the basic use of Wireshark, and apply Wireshark to analyze and evaluate network functionality and security. After completing the course, the student will be able to deploy and use Wireshark to analyze network traffic and to identify and troubleshoot network issues and security problems.

Content

This course focuses on the professional use of Wireshark for network traffic analysis in a cybersecurity context. You will learn how to examine real packet captures, identify suspicious activity, validate normal versus abnormal behavior, and support incident detection and investigation efforts. Through hands-on analysis, the course strengthens your ability to think analytically, interpret evidence, and make informed security decisions based on network data. All practical exercises in this course are conducted in a virtualized lab environment using Kali Linux running in Oracle VirtualBox. This setup provides a safe, isolated, and reproducible platform for capturing and analyzing network traffic without impacting production systems. By working in a virtual environment commonly used by cybersecurity professionals, you will gain hands-on experience that closely reflects real-world security analysis and investigation scenarios. By mastering Wireshark in this controlled environment, you will develop practical skills that are directly applicable to modern cybersecurity operations, incident response, and network defense.

Assessment criteria, approved/failed

Grading is pass/fail. To pass this course Complete all required practical exercises. Attempt all module review tests. Pass the final exams with a score of at least 70%. Failure to complete any mandatory component will result in an incomplete course status, even if other elements are completed successfully.